Application No. 10/568,618 
Attorney Docket No. 09952.0025 



AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

Claims 1-41 (Cancelled). 

42. (Currently Amended) A combinatorial key-dependent network for 
encryption/decryption of input digital data of word size N into output digital data of the 
same word size, comprising at least two layers, each layer comprising at least an 
elementary building block, each building block operating on an input block of bits having 
a word size n+m smaller than or equal to said word size N, for generating an output 
block of bits, said building block comprising: 

a multiplexer circuit, receiving on a control input a first portion m of said input 
block of bits, for selecting k out of 2'"k key bits on a k-bit output of said multiplexer 
circuit, said first portion of bits being transferred intact to an output of said building 
block; and 

a transformation circuit, for transfomiing a remaining portion n of said input block 
of bits into transformed bits according to a reversible transformation chosen, by means 
of said selected k bits, among a plurality of reversible transformations implemented in 
said transformation circuit, wherein said transfomnation circuit transforms said remaining 
portion of said input block of bits without receiving said first portion of said input block of 
bits as an inpu t and said output block of bits comprises the transformed bits followed bv 
said first portion of said input block of bits . 



-2- 



Application No. 10/568,618 
Attorney Docket No. 09952.0025 

43. (Previously Presented) The network according to claim 42, wherein 
adjacent layers are connected by means of a fixed bit permutation block. 

44. (Previously Presented) The network according to claim 43, comprising a 
plurality of fixed bit permutation blocks of the same type. 

45. (Previously Presented) The network according to claim 43, comprising at 
least two different types of fixed bit permutation blocks. 

46. (Previously Presented) The network according to claim 43, wherein bits In 
said first portion of said block of bits are used, in a next layer, as bits to be transformed. 

47. (Previously Presented) The network according to claim 43, wherein, for 
each building block, said first portion of said block of bits are extracted from at least two 
building blocks in a preceding layer, provided that m>=2. 

48. (Previously Presented) The network according to claim 43, wherein, for 
each building block, said second portion of said block of bits are extracted from at least 
two building blocks in a preceding layer, provided that n>=2. 

49. (Previously Presented) The network according to claim 42, wherein each 
layer comprises at least two building blocks. 

50. (Previously Presented) The network according to claim 49, wherein said 
reversible transformations are such that each output bit of said transformed bits is a 
non-linear function of said first portion of said block of bits and of said k key bits, with 
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tlie algebraic normal form containing at least one binary product Involving both said first 

portion of said block of bits and said key bits. 

51 . (Previously Presented) The network according to claim 50, wherein said 
reversible transformations satisfy a criterion that the uncertainty of n input bits provided 
by uniformly random k key bits when the output n bits are known is equal to n bits. 

52. (Previously Presented) The network according to claim 42, wherein said 
multiplexer circuit comprises a lookup table whose content is defined by the key. 

53. (Previously Presented) The network according to claim 42, wherein said 
transformation circuit comprises XOR gates and controlled switches. 

54. (Previously Presented) The network according to claim 53, wherein each 
XOR gate has two input bits and one output bit, one of the two input bits being a key bit, 
and each controlled switch has two input bits, two output bits and one control bit that 
determines if the input bits are swapped or not, said control bit being a key bit. 

55. (Previously Presented) The network according to claim 54, wherein said 
multiplexer circuit has two control bits, four 3-bit inputs and one 3-bit output, and said 
transfomiation circuit comprises two XOR gates and one controlled switch. 

56. (Previously Presented) The network according to claim 55, wherein the 
three bits of said 3-bit output are connected respectively to a first input bit of each XOR 
gate and to the control bit of said controlled switch. 
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57. (Previously Presented) The network according to claim 56, wlierein a 
second input bit of each XOR gate is connected to a bit of said second portion of said 
block of bits. 

58. (Previously Presented) The network according to claim 57, wherein the 
output bits of said XOR gates are connected to the two input bits of said controlled 
switch. 

59. (Previously Presented) The network according to claim 58, wherein the 
two output bits of said controlled switch generate the transfomied bits of said 
transfonnation circuit. 

60. (Previously Presented) The network according to claim 42, comprising a 
plurality of building blocks of the same type. 

61 . (Previously Presented) The network according to claim 42, comprising at 
least two different types of building blocks. 

62. (Previously Presented) The network according to claim 42, wherein 
adjacent layers are connected by means of a block implementing a reversible linear 
function. 

63. (Previously Presented) The network according to claim 42, wherein two 
additional input and output keys of word size N are bitwise XORed respectively with 
said input digital data and with said output digital data. 
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64. (Previously Presented) The network according to claim 42, wherein said 
key bits in each layer, having bit size K', are generated from a smaller number of secret 
key bits, having bit size K, by means of a key expansion algorithm. 

65. (Previously Presented) The network according to claim 64, wherein said K 
secret key bits are first expanded by means of linear transformations Into K' key bits, 
using a linear code so that any subset of K" expanded key bits are linearly Independent, 
where K"<=K. 

66. (Previously Presented) The network according to claim 65, wherein said 
expanded key having bit size K' is used as an input to a further combinatorial key- 
dependent network of block size K' which is parameterised by a fixed randomly 
generated key satisfying the condition that every multiplexer implements balanced 
binary lookup tables. 

67. (Previously Presented) The network according to claim 66, wherein the K' 
bits produced after every two layers of said further combinatorial key-dependent 
network are used as said key bits from the multiplexer circuits within the layers of the 
combinatorial network. 

68. (Previously Presented) The network according to claim 66, wherein said 
further combinatorial key-dependent network comprises a plurality of layers, each layer 
comprising a plurality of simplified building blocks, each building block comprising: 

a multiplexer having one input receiving one control bit which is passed to the 
output intact, for selecting one out of two key bits on a one bit output; and 
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a controlled switch having two input bits, two output bits and one control bit 

connected to the output of said multiplexer, said control bit determining if said two input 

bits are swapped or not. 

69. (Currently Amended) A block for secret-key-controlled cryptographic 
functions, operating on an input block of bits for generating an output block of bits 
comprising: 

a multiplexer circuit receiving on a control input a first portion of m bits of said 
input block of bits, for selecting k out of 2'"k key bits on a k-bit output of said multiplexer 
circuit, said first portion of bits being transferred intact to an output of said building 
block; and 

a transformation circuit for transforming a remaining portion of said input block of 
bits into transformed bits, according to a reversible transformation chosen, by means of 
said selected k bits, among a plurality of reversible transformations implemented in said 
transfomiation circuit, wherein said transformation circuit transforms said remaining 
portion of said input block of bits without receiving said first portion of said input block of 
bits as an inpu t and said output block of bits comprises the transfomned bits followed bv 
said first portion of said input block of bits . 

70. (Previously Presented) The block according to claim 69, wherein said 
transfomiation circuit comprises XOR gates and controlled switches. 

71 . (Previously Presented) The block according to claim 70, wherein each 
XOR gate has two input bits and one output bit, one of the two input bits being a key bit. 
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and each controlled switch has two input bits, two output bits and one control bit that 

determines if the input bits are swapped or not, said control bit being a key bit. 

72. (Previously Presented) The block according to claim 71 , wherein said 
multiplexer circuit has two control bits, four 3-bit inputs and one 3-bit output, and said 
transformation circuit comprises two XOR gates and one controlled switch. 

73. (Previously Presented) The block according to claim 72, wherein the three 
bits of said 3-bit output are connected respectively to a first input bit of each XOR gate 
and to the control bit of said controlled switch. 

74. (Previously Presented) The block according to claim 73. wherein a second 
input bit of each XOR gate is connected to a bit of said second portion of said block of 
bits. 

75. (Previously Presented) The block according to claim 74, wherein the 
output bits of said XOR gates are connected to the two input bits of said controlled 
switch. 

76. (Previously Presented) The block according to claim 75. wherein the two 
output bits of said controlled switch generate the transformed bits of said transformation 
circuit. 

77. (Currently Amended) A method for encryption/decryption of input digital 
data of word size N into an output digital data of the same word size, comprising; 
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a) dividing said Input digital data into blocks of bits, each having a word size 
n+m smaller than said word size N, each block of bits being divided into a first portion m 
and a second portion n; 

b) for each block of bits: 

b1) addressing a lookup table containing 2"'k key bits, by means of said 
first portion m of bits, for selecting k out of 2"'k key bits, transfening Intact said first 
portion m of bits to a first portion of transformed bits; 

b2) selecting, by means of said selected k bits, a reversible transformation 
among a plurality of reversible transformations, by inputting said selected k bits into a 
transformation circuit without also inputting said first portion m of bits into said 
transformation circuit; 

b3) applying said reversible transformation to said second portion n of bits, 
thus generating a second portion of transformed bits; 

c) collecting the transformed bits from each block Into said output digital 
data , wherein the transformed bits from each block comprise the second portion of 
transformed bits followed bv the first portion of transfonned bits . 

78. (Previously Presented) The method according to claim 77, wherein said 
step b) Is reiterated on a block of bits comprising said first and second portions of 
previously transfomried bits. 

79. (Previously Presented) The method according to claim 78, wherein, before 
each reiteration of step b), a fixed bit pemiutation is applied to said previously 
transformed bits. 
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80. (Previously Presented) The method according to claim 78, wherein, before 
each reiteration of step b), a reversible linear function is applied to said previously 
transformed bits. 

81 . (Previously Presented) A data processing device comprising a central 
processing unit, volatile or non-volatile memory, and at least a data, instruction or 
address bus, comprising at least a combinatorial key-dependent network according to 
any one of claims 42 to 68, for encryption/decryption of digital data on said data, 
instruction, or address bus and/or into said memories. 

82. (Previously Presented) A multimedia device for storing and playing 
copyright digital data comprising at least a combinatorial key-dependent network 
according to any one of claims 42 to 68, for encryption/decryption of said copyright 
digital data. 
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